Secure Peer Networking with Tinc

Tinc (http://www.tinc-vpn.org/) provides a secure mesh vpn for any number of hosts. My friends and I used this to build a network linking our homes, laptops, and various hosted machines. This is different from the usual use of a vpn, where multiple clients connect to a single server. We use Tinc to provide a secure peer to peer network over the public internet. We started doing some cool things with it such as UPnP and NFS, things that would be impossible to do securely over the public internet. We then added Consul (https://consul.io/) which provides a service directory and health checks. Consul's raft consensus algorithm works well for us because nodes drop on and off this network frequently.

In this talk I will cover the configuration of our VPN and the neat things that we do with it. This is for the security track.